Experts On Google Voice Outage

By   ISBuzz Team
Writer , Information Security Buzz | Mar 02, 2021 02:27 am PST

The recent Google Voice outage determined to be caused by an expired TLS certificate. According to the Google Cloud Issue Summary, “Due to an issue with updating certificate configurations, the active certificate in Google Voice frontend systems inadvertently expired at 2021-02-15 23:51:00, triggering the issue.”

Notify of
1 Expert Comment
Oldest Most Voted
Inline Feedbacks
View all comments
Chris Hickman
Chris Hickman , Chief Security Officer
March 2, 2021 10:28 am

<p>An outage happens when expired certificates fail to authenticate or establish secure communication tunnels. A certificate expiration on its own is not necessarily a security response incident but is disruptive and can lead to outages like that experienced by Google Voice customers. Certificate expiration is an important mechanism to make sure certificates are still being issued to a valid system, similarly to why a driver’s license or passport needs to be renewed periodically. It offers a check and balance system, in the form of workflow and approvals, to maintain legitimacy and authorization. Changes implemented last year by the CA/B forum reduced the lifetime of an SSL/TLS certificate to 398 days and therefore has compounded the issue of keeping up with expiring certificates.</p>

Last edited 2 years ago by Chris Hickman

Recent Posts

Would love your thoughts, please comment.x